Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa
File:                     9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa (raw, json)
Hash identifier:          IuKmspv4oCs4y59PKGMPHW3uLrFvTAZ9faV/RqIm37g=
Subject key identifier:   AC:E1:FA:EF:EB:33:71:60:63:62:FF:2A:39:9C:2B:E1:C1:56:5C:C1
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F4328584A90A0C0DEC4C16F1BC02406B0
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     18615
IP address blocks:        74.116.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c0:de:c4:c1:6f:1b:c0:24:06:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=7f214200-d50e-4684-83ff-d1742e88c971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:4e:ee:e7:3c:dd:63:4a:15:1c:77:06:5f:
                    84:2f:36:c5:6f:96:b6:b0:7e:45:14:b8:f3:4c:16:
                    30:7f:6b:10:6e:32:c1:0f:a2:88:d8:92:fd:bd:29:
                    12:c4:ec:8b:99:da:07:50:4e:25:16:16:9a:5a:8c:
                    9b:1d:2d:07:8b:82:cf:32:b0:55:1f:ac:6b:71:48:
                    81:f1:0d:07:f7:03:ed:31:49:f0:c5:a6:e1:75:1b:
                    b7:dd:76:3f:4c:dd:dc:df:c2:a2:1d:b0:1d:d1:4b:
                    4c:bd:15:bc:18:25:9d:53:82:03:1d:d3:8f:a1:16:
                    93:9f:17:d4:fd:83:2a:72:e9:67:6e:4a:d1:e2:da:
                    ef:d3:b7:ce:a3:39:47:b3:91:d6:fb:d3:d8:84:82:
                    74:34:8c:5d:e9:07:85:b0:11:e0:e1:92:92:41:ce:
                    4b:4a:3e:de:3a:84:dc:b5:fa:10:1c:72:89:31:01:
                    9e:d8:9e:72:bd:6f:58:f0:c4:90:f1:6e:22:5c:75:
                    9a:50:a0:0a:00:17:b1:3c:45:be:84:80:47:dd:39:
                    b4:78:66:51:0e:bc:1e:58:98:b5:23:cd:a2:ea:a0:
                    01:c4:2e:7a:a1:ab:35:ae:de:d6:be:17:09:d4:06:
                    23:2e:0a:d7:94:4c:13:17:63:3e:a8:58:09:57:79:
                    5f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E1:FA:EF:EB:33:71:60:63:62:FF:2A:39:9C:2B:E1:C1:56:5C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:a7:d0:75:a3:8e:85:0b:0a:62:a8:8b:55:fe:f1:4c:00:
         d1:2a:b1:c2:60:3b:df:30:c5:f1:b9:62:97:90:c6:57:d6:e1:
         cc:4c:1d:90:4d:62:1a:a9:f1:19:f5:91:9d:82:7a:99:b2:77:
         ed:66:a7:9e:c4:fe:97:cf:d6:5c:ac:24:a7:6b:12:bc:36:1f:
         5d:37:12:0a:91:f8:d9:99:b2:29:8f:02:27:be:6c:fd:02:a8:
         c6:1b:b4:d4:06:7b:27:0f:a0:51:29:24:fa:39:d1:f4:21:f2:
         c9:ff:0a:95:93:93:ed:2f:7c:4d:99:da:4f:d4:42:5a:78:6f:
         7b:d9:fc:e0:ea:96:c7:5c:51:c2:77:b4:83:33:b4:ed:99:5a:
         a3:45:32:70:e9:cb:11:90:65:f6:1b:05:95:55:5c:4c:d0:b1:
         26:2a:7a:c3:d1:22:fb:81:92:8d:e3:e6:bc:d3:c3:e2:06:98:
         1a:d3:44:4e:5b:83:c8:68:d5:44:ab:96:ed:3f:61:47:35:f4:
         fd:b4:e0:20:fa:16:56:2a:a9:21:77:a3:b6:e2:ef:eb:41:3b:
         85:3f:2c:7a:26:87:86:f7:fc:85:83:7c:56:1f:dd:04:95:75:
         61:4c:1a:82:09:91:bf:94:44:37:d5:04:8b:03:f7:35:43:c8:
         aa:75:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:05:33 2025 by rpki-client